Skip to main content

parse_vpol_file

Function parse_vpol_file 

Source
pub fn parse_vpol_file(data: &[u8]) -> Result<Vec<u8>, DpapiError>
Expand description

Strip the VAULT_VPOL wrapper, returning the inner DPAPI blob bytes.

Reads Version(4), Guid(16), length-prefixed Description, Unknown(12), Size(4), Guid2(16), Guid3(16), KeySize(4), then KeySize bytes of the inner DPAPI blob.